This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft File: TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json) Hash identifier: sEjFxPPk0T/SgEfVFRGvDwI9LQMsFuLlUfo2BTTZO4s= Subject key identifier: 11:7C:F4:76:B2:63:3D:62:3E:C6:40:D4:93:18:B5:C4:39:6F:BF:84 Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E Certificate issuer: /CN=4d2b4196956a4315340f827d992a0f7a29284c3e Certificate serial: 019B323163F4056FC34F350BCDBC254D7C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft Manifest number: 1412 Signing time: Thu 18 Dec 2025 16:00:56 +0000 Manifest this update: Thu 18 Dec 2025 16:00:56 +0000 Manifest next update: Fri 19 Dec 2025 16:00:56 +0000 Files and hashes: 1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: 3v/FoXF4LV2yRUYnHMYeUBodnCzuH/FkYCKS1oMYMiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:63:f4:05:6f:c3:4f:35:0b:cd:bc:25:4d:7c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e Validity Not Before: Dec 18 16:00:56 2025 GMT Not After : Dec 19 16:00:56 2025 GMT Subject: CN=117cf476b2633d623ec640d49318b5c4396fbf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:c7:52:b6:96:80:3b:b7:86:61:be:14:f8: e1:3e:91:b6:db:86:e2:5c:58:f4:7c:0b:88:0f:68: e7:ac:11:4c:73:1e:48:2b:c7:ed:48:bb:c7:8a:47: 59:f6:a4:48:ba:9a:ef:83:e0:6f:ec:dc:6f:08:c0: 1a:84:07:78:8c:d3:83:8d:5b:03:f0:f3:13:b1:6d: 5f:65:c0:b5:5a:67:38:a3:ec:7b:62:54:a8:51:7b: 0b:0d:be:35:2c:ca:21:18:7c:5a:1b:ac:b1:4a:65: fc:a9:cb:a0:2a:1f:23:a6:d2:e8:b4:3a:22:8a:e4: 69:8b:ce:de:0a:1a:77:ae:5d:3f:fb:82:9e:2a:e8: d4:27:04:51:7d:01:5d:d3:9f:d1:16:6c:ac:8c:6d: 65:5e:29:f2:c5:d4:99:26:d1:81:02:e1:7a:1c:9d: 4d:6e:85:dc:fb:c5:a4:c0:48:d7:8d:fe:d8:f8:49: eb:dd:e2:00:ea:b3:2a:0f:1e:6a:9f:95:89:64:8b: 21:b9:e3:11:b4:5d:44:d9:28:df:e1:fa:d4:4f:d8: ce:71:62:ee:03:34:5d:cb:ac:9b:c7:14:27:c3:a3: eb:9a:0e:e8:8e:78:60:10:62:f5:39:96:ce:89:92: 0e:db:ba:eb:cc:73:cf:20:cc:31:89:82:aa:d2:84: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7C:F4:76:B2:63:3D:62:3E:C6:40:D4:93:18:B5:C4:39:6F:BF:84 X509v3 Authority Key Identifier: keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4a:0f:82:a0:22:b3:ee:7e:19:b1:95:99:24:ee:8b:4d:63: a9:ff:2d:af:cf:4b:26:48:77:fd:ea:be:0d:af:92:d8:97:d9: 72:6a:87:a9:b8:50:51:d9:7c:9c:62:59:75:76:92:f4:1b:cc: 19:1f:51:20:f9:32:cd:be:e6:0f:35:68:41:77:ed:fd:47:f5: 81:48:19:9b:9c:8b:3f:91:af:5a:14:b2:97:b2:56:08:35:08: 2d:e3:4c:db:04:20:fb:a0:22:81:bd:ef:a9:30:96:7a:35:14: 23:1b:3a:08:4d:bd:5f:50:40:7b:fa:41:27:6e:b9:bd:f9:54: 29:0d:49:4f:95:89:db:84:c1:3d:62:18:e5:5f:96:f8:6b:80: 3f:c8:b4:de:73:22:a0:79:b1:fd:6b:46:f5:b7:dd:c8:5f:0e: 7e:31:c0:6a:33:c4:2a:e4:7d:c0:71:99:cb:5c:b7:32:c1:fe: 94:52:3a:ad:ef:69:88:d1:44:11:b5:6b:0d:da:f4:ca:26:47: d8:56:25:34:ca:44:6b:0b:36:3e:33:a1:bf:64:dc:43:65:bd: 2f:01:d6:7c:34:a7:20:5b:89:de:53:f2:f8:0d:5e:f9:29:c0: ca:f3:30:79:6c:4f:df:47:79:8b:a3:46:f1:19:10:a4:40:48: 4c:41:7d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWP0BW/DTzULzbwlTXxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmI0MTk2OTU2YTQzMTUzNDBmODI3ZDk5MmEwZjdhMjky ODRjM2UwHhcNMjUxMjE4MTYwMDU2WhcNMjUxMjE5MTYwMDU2WjAzMTEwLwYDVQQD EygxMTdjZjQ3NmIyNjMzZDYyM2VjNjQwZDQ5MzE4YjVjNDM5NmZiZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOHHUraWgDu3hmG+FPjhPpG224bi XFj0fAuID2jnrBFMcx5IK8ftSLvHikdZ9qRIuprvg+Bv7NxvCMAahAd4jNODjVsD 8PMTsW1fZcC1Wmc4o+x7YlSoUXsLDb41LMohGHxaG6yxSmX8qcugKh8jptLotDoi iuRpi87eChp3rl0/+4KeKujUJwRRfQFd05/RFmysjG1lXinyxdSZJtGBAuF6HJ1N boXc+8WkwEjXjf7Y+Enr3eIA6rMqDx5qn5WJZIshueMRtF1E2Sjf4frUT9jOcWLu AzRdy6ybxxQnw6Prmg7ojnhgEGL1OZbOiZIO27rrzHPPIMwxiYKq0oSUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF89HayYz1iPsZA1JMYtcQ5b7+EMB8GA1UdIwQY MBaAFE0rQZaVakMVNA+CfZkqD3opKEw+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUt NDU1YTBhNjFmMWVhLzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zYzAyYjktMjVjNC00ODhmLWE5NzUtNDU1YTBhNjFmMWVh LzEvVFN0QmxwVnFReFUwRDRKOW1Tb1BlaWtvVEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakoPgqAi s+5+GbGVmSTui01jqf8tr89LJkh3/eq+Da+S2JfZcmqHqbhQUdl8nGJZdXaS9BvM GR9RIPkyzb7mDzVoQXft/Uf1gUgZm5yLP5GvWhSyl7JWCDUILeNM2wQg+6Aigb3v qTCWejUUIxs6CE29X1BAe/pBJ265vflUKQ1JT5WJ24TBPWIY5V+W+GuAP8i03nMi oHmx/WtG9bfdyF8OfjHAajPEKuR9wHGZy1y3MsH+lFI6re9piNFEEbVrDdr0yiZH 2FYlNMpEaws2PjOhv2TcQ2W9LwHWfDSnIFuJ3lPy+A1e+SnAyvMweWxP30d5i6NG 8RkQpEBITEF9UA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:16 2025 by rpki-client